Privacy policy
This privacy policy explains the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer and the associated websites, functions and content as well as external online presences, such as our social media profile (hereinafter jointly referred to as "online offer"). With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
RESPONSIBLE
07eins GmbHSimon Schoßböck
Willenbach 12
84367 Reut
Germany
contact@07eins.com
TYPES OF DATA PROCESSED:
- Inventory data (e.g. names, addresses).
- Contact details (e.g., e-mail, telephone numbers).
- Content data (e.g., text entries, photographs, videos).
- Usage data (e.g., websites visited, interest in content, access times).
- Meta/communication data (e.g., device information, IP addresses).
CATEGORIES OF DATA SUBJECTS
Visitors and users of the online offer (hereinafter we also refer to the data subjects collectively as "users").
PURPOSE OF THE PROCESSING
- Provision of the online offer, its functions and content.
- Answering contact requests and communicating with users.
- Safety measures.
- Reach measurement/marketing
TERMINOLOGY USED
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" means any operation or set of operations which is performed on personal data, whether or not by automated means. The term is broad and covers practically any handling of data.
"Pseudonymization" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
The "controller" is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
RELEVANT LEGAL BASIS
In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not stated in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the performance of our services and implementation of contractual measures as well as responding to inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
SECURITY MEASURE
We take appropriate technical and organizational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, disclosure, safeguarding of availability and its separation. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and the response to data threats. Furthermore, we take the protection of personal data into account as early as the development and selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly default settings (Art. 25 GDPR).
COOPERATION WITH PROCESSORS AND THIRD PARTIES
If we disclose data to other persons and companies (processors or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR), you have given your consent, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.
TRANSFERS TO THIRD COUNTRIES
Some of the service providers we use also process data outside the European Union or the European Economic Area. Any such transfer takes place only in compliance with Articles 44 et seq. of the GDPR. Depending on the recipient, we base the transfer in particular on an adequacy decision by the European Commission, a valid certification of the recipient under the EU-U.S. Data Privacy Framework, the European Commission's Standard Contractual Clauses, approved Binding Corporate Rules or another safeguard provided for by law. Where necessary, we also assess whether supplementary safeguards are required. Further details can also be found in the descriptions of the respective services below.
RIGHTS OF THE PERSONS CONCERNED
You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
You have accordingly. Art. 16 GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted immediately or, alternatively, to demand that the processing of the data be restricted in accordance with Art. 18 GDPR.
You have the right to request to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request its transfer to other controllers.
In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.
RIGHT OF WITHDRAWAL
You have the right to withdraw your consent in accordance with Art. 7 (3) GDPR with effect for the future
RIGHT OF OBJECTION
You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. In particular, you may object to processing for direct marketing purposes.
COOKIES, SIMILAR TECHNOLOGIES AND CONSENT MANAGEMENT
Our online shop uses technically necessary cookies and similar storage or access technologies to provide essential functions such as the shopping basket, checkout, security, login and language settings. Where their use is not already strictly necessary, information is stored on your device or accessed only with your consent in accordance with Section 25(1) TDDDG. The subsequent processing of personal data for analytics, attribution and advertising purposes is based on your consent in accordance with Article 6(1)(a) GDPR.
To obtain, manage and document your choices, we use Pandectes GDPR Compliance provided by Pandectes, Pudisoo küla, Männimäe/1, 74626 Kuusalu vald, Estonia. In particular, a pseudonymous consent ID, the time and status of your choice, the URL accessed, country code, a truncated IP address and the user agent may be processed. The processing serves to document and manage your consent and is based on Article 6(1)(c) GDPR and our legitimate interest in traceable consent management pursuant to Article 6(1)(f) GDPR. Further information is available at https://pandectes.io/privacy-policy/.
You can change or withdraw your choices at any time with effect for the future via the cookie settings available in the shop. Withdrawal does not affect the lawfulness of processing carried out before that time. If you reject technologies that are not necessary, the shopping basket and checkout will remain available; individual analytics, personalisation or convenience functions may be restricted.
DELETION OF DATA
The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
According to legal requirements in Germany, the retention period is 10 years in accordance with §§ 147 para. 1 AO, 257 para. 1 no. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years in accordance with § 257 para. 1 no. 2 and 3, para. 4 HGB (commercial letters).
According to legal requirements in Austria, the retention period is 7 years in accordance with § 132 para. 1 BAO (accounting documents, receipts/invoices, accounts, receipts, business papers, statement of income and expenses, etc.), 22 years in connection with real estate and 10 years for documents in connection with electronically provided services, telecommunications, radio and television services provided to non-entrepreneurs in EU member states and for which the Mini-One-Stop-Shop (MOSS) is used.
BUSINESS-RELATED PROCESSING
We also process
- Contract data (e.g., subject matter of the contract, term, customer category).
- Payment data (e.g., bank details, payment history)
from our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
ORDER PROCESSING IN THE ONLINE STORE AND CUSTOMER ACCOUNT
We process our customers' data as part of the ordering process in our online store in order to enable them to select and order the selected products and services, as well as their payment and delivery or execution.
The processed data includes inventory data, communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online store, billing, delivery and customer services. We use session cookies to store the contents of the shopping cart and permanent cookies to store the login status.
The processing is carried out on the basis of Art. 6 para. 1 lit. b (execution of order processes) and c (legally required archiving) GDPR. The information marked as necessary is required to justify and fulfill the contract. We only disclose the data to third parties in the context of delivery, payment or within the scope of legal permissions and obligations towards legal advisors and authorities. The data will only be processed in third countries if this is necessary for the fulfillment of the contract (e.g. at the customer's request for delivery or payment).
Users can optionally create a user account in which they can view their orders in particular. As part of the registration process, users are provided with the required mandatory information. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention is necessary for commercial or tax law reasons in accordance with Art. 6 para. 1 lit. c GDPR. Information in the customer account remains until its deletion with subsequent archiving in the event of a legal obligation. It is the responsibility of users to back up their data before the end of the contract in the event of termination.
We store the IP address and the time of the respective user action as part of the registration and renewed logins as well as the use of our online services. This data is stored on the basis of our legitimate interests and those of the user in protection against misuse and other unauthorized use. This data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR.
The deletion takes place after the expiry of statutory warranty and comparable obligations, the necessity of storing the data is reviewed every three years; in the case of statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation).
EXTERNAL PAYMENT SERVICE PROVIDERS
We use external payment service providers via whose platforms the users and we can carry out payment transactions (e.g., each with a link to the privacy policy, Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), Klarna (https://www.klarna.com/de/datenschutz/), Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/), Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/), Visa (https://www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html), American Express (https://www.americanexpress.com/de/content/privacy-policy-statement.html)
As part of the fulfillment of contracts, we use the payment service providers on the basis of Art. 6 para. 1 lit. b. GDPR. In addition, we use external payment service providers on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR. GDPR in order to offer our users effective and secure payment options.
The data processed by the payment service providers includes inventory data, such as the name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, total and recipient-related information. The information is required to carry out the transactions. However, the data entered is only processed by the payment service providers and stored by them. This means that we do not receive any account or credit card-related information, but only information with confirmation or negative information about the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. The purpose of this transmission is to check identity and creditworthiness. Please refer to the terms and conditions and data protection information of the payment service providers.
Payment transactions are subject to the terms and conditions and the data protection notices of the respective payment service providers, which can be accessed on the respective websites or transaction applications. We also refer to these for further information and the assertion of rights of revocation, information and other rights of data subjects.
ADMINISTRATION, FINANCIAL ACCOUNTING, OFFICE ORGANIZATION, CONTACT MANAGEMENT
We process data in the context of administrative tasks and the organization of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process as part of the provision of our contractual services. The processing bases are Art. 6 para. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of data with regard to contractual services and contractual communication corresponds to the information specified in these processing activities.
We disclose or transmit data to the tax authorities, consultants such as tax advisors or auditors as well as other fee offices and payment service providers.
We also store information on suppliers, event organizers and other business partners on the basis of our business interests, e.g. for the purpose of contacting them at a later date. We generally store this data, most of which is company-related, permanently.
BUSINESS ANALYSES AND MARKET RESEARCH
In order to operate our business economically, identify market trends and the wishes of contractual partners and users, we analyze the data available to us on business transactions, contracts, inquiries, etc. In doing so, we process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 para. 1 lit. f. GDPR. GDPR, whereby the data subjects include contractual partners, interested parties, customers, visitors and users of our online offering.
The analyses are carried out for the purpose of business evaluations, marketing and market research. In doing so, we can take into account the profiles of registered users with information, e.g. on the services they have used. The analyses help us to increase user-friendliness, optimize our offer and improve business efficiency. The analyses serve us alone and are not disclosed externally, unless they are anonymous analyses with summarized values.
If these analyses or profiles are personal, they will be deleted or anonymized upon termination by the user, otherwise after two years from the conclusion of the contract. Otherwise, the overall business analyses and general trend determinations are created anonymously where possible.
PARTICIPATION IN AFFILIATE PARTNER PROGRAMS
Within our online offer, we use industry-standard tracking measures on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer) in accordance with Art. 6 para. 1 lit. f GDPR, insofar as these are necessary for the operation of the affiliate system. Below we explain the technical background to users.
The services offered by our contractual partners may also be advertised and linked on other websites (so-called affiliate links or after-buy systems, e.g. if links or third-party services are offered after a contract has been concluded). The operators of the respective websites receive a commission if users follow the affiliate links and subsequently take advantage of the offers.
In summary, it is necessary for our online offer that we can track whether users who are interested in affiliate links and/or the offers available from us subsequently take advantage of the offers at the instigation of the affiliate links or our online platform. For this purpose, the affiliate links and our offers are supplemented by certain values that can be set as part of the link or otherwise, e.g. in a cookie. The values include, in particular, the source website (referrer), time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, an online identifier of the user, as well as tracking-specific values such as advertising material ID, partner ID and categorizations.
The online identifiers we use for users are pseudonymous values. This means that the online identifiers themselves do not contain any personal data such as names or e-mail addresses. They only help us to determine whether the same user who clicked on an affiliate link or was interested in an offer via our online offer took up the offer, i.e. concluded a contract with the provider, for example. However, the online identifier is personal to the extent that the partner company and we have the online identifier together with other user data. Only in this way can the partner company inform us whether the user has taken up the offer and we can, for example, pay out the bonus.
CONTACT US
When contacting us (e.g. by contact form, e-mail, telephone or via social media), the user's details are processed to process the contact request and its handling in accordance with Art. 6 para. 1 lit. b) GDPR. The user's details may be stored in a customer relationship management system ("CRM system") or comparable inquiry organization.
We delete the requests if they are no longer required. We review the necessity every two years; the statutory archiving obligations also apply.
HOSTING AND E-MAIL DELIVERY
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services that we use for the purpose of operating this online offering.
We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in the efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of order processing contract). Art. 28 GDPR (conclusion of order processing contract).
COLLECTION OF ACCESS DATA AND LOG FILES
We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR, we collect data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.
SHOPIFY AND OPERATION OF THE ONLINE SHOP
We operate this online shop using services provided by Shopify International Limited, 2nd Floor, 1–2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). For the operation of the shop, Shopify processes in particular master, contact, contract, order, payment-status, usage, device and log data. This processing is necessary to provide the shop, take steps prior to entering into a contract, perform contracts and ensure secure operation, and is based on Article 6(1)(b), (c) and (f) GDPR. Where Shopify acts on our behalf, it does so on the basis of a data processing agreement. For certain Shopify services of its own, in particular Shop and Shop Pay and any activated Enhanced Services, Shopify processes data under its own privacy terms and on its own responsibility. Shopify may also process data outside the EEA using affiliated companies and subprocessors and, in particular, relies on approved Binding Corporate Rules, Standard Contractual Clauses and, where applicable, adequacy decisions. Further information: Shopify Consumer Privacy Policy and Shopify Data Processing Addendum.
CHAT USING SHOPIFY INBOX AND AI ASSISTANT
We use Shopify Inbox to answer questions in the online shop by chat. If the Inbox agent is enabled, responses are initially generated automatically using an AI system. For this purpose, the agent may access our published shop content, product catalogue, policies and the Knowledge Base maintained by us. An AI response is not a substitute for a binding individual technical diagnosis. The AI assistant does not make any decision that produces legal effects concerning you or similarly significantly affects you.
When you use the chat, we process in particular your messages, timestamps, language and technical connection and device data. If you provide contact details, log in via Shop or your customer account, or use an order function intended for this purpose, your name, email address, customer-account data and the order context required for your request may also be processed. Merely stating a name or email address in the contact form does not automatically give the AI agent access to your order history. Access to customer or order data requires the designated login or function and the relevant permissions.
The processing is carried out to answer your request and take steps prior to entering into a contract or perform a contract pursuant to Article 6(1)(b) GDPR, and for efficient, secure customer support pursuant to Article 6(1)(f) GDPR. If you would like to speak to a person or the agent cannot proceed, the conversation, including the previous conversation context, may be handed over to our team. Alternatively, you can contact us via our contact form or by email at kontakt@07eins.com.
The processing is technically carried out through Shopify International Limited. If you log in using Shop, Shopify may additionally process data for its own Shop functions in accordance with the Shopify Consumer Privacy Policy. Chat histories are deleted or anonymised when they are no longer required for customer service, documentation and security purposes and no statutory retention obligations prevent this.
TECHNICAL MEASUREMENT USING SHOPLYTICS
For the technical orchestration and server-side transmission of analytics and conversion events, we use Shoplytics provided by Conversion.Consulting GbR, Gerd Breil and Florian Schoel, Steinmetzstraße 6, 85435 Erding, Germany (“Shoplytics”). Shoplytics is not an additional advertising platform; it connects our Shopify shop with the measurement and advertising services named below. Depending on the service concerned, the event type and time, page and source URL, pseudonymous click or event identifiers, device and browser data and, for purchases, the order reference, product identifiers, value and currency are processed in particular. Personal attribution identifiers are transmitted only where this is expressly described for the relevant service below and has been technically enabled.
The use of Shoplytics for non-essential analytics and advertising purposes is based on your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Shoplytics processes data for us as a technical service provider; the recipients of the events are the respective platform providers named below. Further information: https://shoplytics.de/datenschutzerklaerung.
GOOGLE ANALYTICS AND GOOGLE ADS
After receiving your consent, we use Google Analytics and Google Ads provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how our shop is used. Google Ads enables us to measure whether an ad impression or ad click led to a visit or purchase and, where you permit this, to create audiences and optimise our ads.
The data processed may include, in particular, pages accessed and events, time, approximate region, referrer and destination URL, browser, device and operating-system data, IP address, cookie or device identifiers, Google click identifiers, consent signals and, for commerce events, product identifiers, order reference, value and currency. Purchase events may also be transmitted to Google server-side via Shoplytics. Data is combined with other Google data and used for personalised advertising only within the scope of your choices and Google account settings.
The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw it at any time via our cookie settings. Google may also process data outside the EEA; the safeguards described in the “Transfers to third countries” section apply to such processing. The retention period depends on the product and account settings we have selected and Google's deletion rules. Further information: Google Privacy Policy, Google advertising technologies and Google ad settings.
META PIXEL AND CONVERSIONS API
After receiving your consent, we use advertising and measurement services provided by Meta Platforms Ireland Limited, Merrion Road, Ballsbridge, Dublin 4, D04 X2K5, Ireland (“Meta”). These include the Meta Pixel in the browser and server-side conversion events through the Meta Conversions API. This allows us to measure the impact of our advertising on Facebook and Instagram, attribute visits and purchases to ad interactions and optimise campaigns.
The data processed may include page views, events such as product views, additions to the shopping basket and purchases, URL and referrer, time, IP address, user agent, device/browser data, Meta cookies and click identifiers, as well as product identifiers, order reference, value and currency. Where provided for in the active Shopify/Shoplytics data-sharing mode, normalised contact or customer identifiers that are hashed before transmission, such as an email address, telephone number or external customer identifier, may also be transmitted for matching. Meta can combine and deduplicate browser and server events using an event identifier.
The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw it via our cookie settings. Meta may also process data outside the EEA using the safeguards specified in the “Transfers to third countries” section. Further information: Meta Privacy Policy and Ad preferences.
TIKTOK PIXEL AND EVENTS API
After receiving your consent, we use the TikTok Pixel and TikTok Events API provided by TikTok Technology Limited, The Sorting Office, Ropemaker Place, Dublin 2, D02 HD23, Ireland (“TikTok”). These services are used to attribute visits and purchases to TikTok advertising, measure and optimise campaigns and, where you permit this, create audiences.
The data processed may include advertising and event information, timestamps, the page accessed, URL and referrer, TikTok click identifier (ttclid), cookies, IP address, user agent, device/browser data, page and interaction metadata, as well as product identifiers, order reference, value and currency. For secure attribution matching, email address, telephone number and external customer identifier may also be hashed using SHA-256 before transmission. Events from the Pixel and Events API can be combined and deduplicated using a shared event identifier.
The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw it via our cookie settings. TikTok may also process data outside the EEA; the safeguards described in the “Transfers to third countries” section apply to such processing. Further information: TikTok Privacy Policy.
OPENAI / CHATGPT ADS: MEASUREMENT PIXEL AND CONVERSIONS API
After receiving your consent, we use the Ad Tools provided by OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”) to measure our advertising in ChatGPT. We use a browser-based Measurement Pixel and the server-side Conversions API through Shoplytics. This allows us to measure whether an ad click in ChatGPT led to a visit or purchase in our shop and to evaluate campaign performance.
The OpenAI advertising click reference, event type and time, event identifier, source and destination page, technical browser/device signals and, for a purchase, the order reference, product identifiers, value and currency may be transmitted. In the current 07eins setup, Automatic Advanced Matching and transmission of the optional OpenAI user object are disabled. Names, email addresses, telephone numbers and postal addresses are not transmitted to OpenAI through this OpenAI Ads route.
The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw it via our cookie settings. OpenAI processes EEA data under the OpenAI Ad Tools Data Processing Addendum through OpenAI Ireland Limited and may also use subprocessors outside the EEA; permitted transfer mechanisms such as Standard Contractual Clauses are used for this purpose. Further information: OpenAI Ad Tools DPA and OpenAI Europe Privacy Policy.
MICROSOFT ADVERTISING AND UNIVERSAL EVENT TRACKING
After receiving your consent, we use Microsoft Advertising and Universal Event Tracking (“UET”) provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. UET measures which actions take place in our shop after an ad impression or ad click and may, where you permit this, be used for remarketing and campaign optimisation.
The data processed may include page views and purchase events, time, URL and referrer, IP address, user agent, browser/device data, Microsoft cookies and click identifier (msclkid), consent signal, as well as product identifiers, order/event reference, value and currency. The UET Consent Mode signal controls whether advertising cookies may be stored on your device.
The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw it via our cookie settings. Microsoft may also process data outside the EEA; the safeguards described in the “Transfers to third countries” section apply to such processing. Further information: Microsoft Privacy Statement and Microsoft advertising settings.
RETENTION OF ANALYTICS, ADVERTISING AND CHAT DATA
We retain analytics, advertising and chat data only for as long as necessary for the purposes described or as required by statutory obligations and the defence or enforcement of claims. The specific period depends on the service, event type, account settings selected by us, any withdrawal of consent and the deletion rules of the respective recipient. Raw data and event data are deleted, aggregated or anonymised after the relevant configured period has expired. Order and accounting records that must be retained by law are not affected by deletion of advertising attribution data.
ONLINE PRESENCE IN SOCIAL MEDIA
We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in our privacy policy, we process users' data if they communicate with us within social networks and platforms, e.g. write posts on our online presences or send us messages.
INTEGRATION OF THIRD-PARTY SERVICES AND CONTENT
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we use content or service offers from third-party providers within our online offer. GDPR), we use content or service offers from third-party providers to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").
This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, visit time and other information about the use of our online offer, as well as being linked to such information from other sources.
YOUTUBE
We integrate the videos of the platform "YouTube" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/Opt-Out: https://adssettings.google.com/authenticated.
Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke